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What Is claimed Is: 

1. An encrypting apparatus comprising: 

an encrypting operation section carrying out an 
encrypting operation to a plaintext using intermediate 
data at each of a plurality of encrypting stages of 
5 said encrypting operation to produce a ciphertext, 
wherein said encrypting operation section outputs 
encrypting stage data indicating an encrypting state 
at each of said plurality of processing stages; 

a determining section determining whether said 
10 encrypting operation at a next encrypting stage should 
be changed, based on said encrypting stage data at a 
current encrypting stage from said encrypting 
operation section; and 

a control section changing said encrypting 
15 operation at said next encrypting stage when it is 

determined that said encrypting operation at said next 
encrypting stage should be changed. 

2. An encrypting apparatus according to claim 1, 
wherein said determining section determines whether 
said intermediate data at said next encrypting stage 
of said encrypting operation should be changed 

5 depending on at least a random number, based on said 
encrypting stage data at said current encrypting stage 
from said encrypting operation section, 

wherein said encrypting stage data includes 



- 108 - 



said intermediate data at said next encrypting stage, 
10 and 

wherein said control section changes said 
intermediate data at said next encrypting stage 
depending on said random number. 

3. An encrypting apparatus according to claim 2, 
wherein said control section changes said intermediate 
data at said next encrypting stage depending on said 
plaintext or a data dependent on said plaintext in 

5 place of said random number. 

4. An encrypting apparatus according to claim 1, 
wherein said determining section determines whether an 
encrypting procedure at said next encrypting stage of 
said encrypting operation should be changed depending 

5 on at least a random number, based on said encrypting 
stage data at said current encrypting stage from said 
encrypting operation section, and 

wherein said control section changes said 
encrypting procedure at said next encrypting stage of 
10 said encrypting operation depending on said random 
number . 

5. An encrypting apparatus according to claim 4, 
wherein said control section changes said encrypting 
procedure at said next encrypting stage of said 
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encrypting operation depending on said plaintext or a 
data dependent on said plaintext in place of said 
random number . 

6. An encrypting apparatus according to claim 1, 
wherein said determining section determines whether 
said encrypting operation at said next encrypting 
stage should be changed depending on at least a random 
number, based on said encrypting stage data at said 
current encrypting stage from said encrypting 
operation section, and 

wherein said control section inserts a delay 
time in said encrypting operation at said next 
encrypting stage depending on said random number. 

7. An encrypting apparatus according to claim 6, 
wherein said control section inserts said delay time 
in said encrypting operation at said next encrypting 
stage depending on said plaintext or a data dependent 
on said plaintext in place of said random number. 

8. A decrypting apparatus comprising: 

a decrypting operation section carrying out a 
decrypting operation to a ciphertext using 
intermediate data at each of a plurality of decrypting 
stages of said decrypting operation to produce a 
plaintext, wherein said decrypting operation section 




outputs decrypting stage data indicating a decrypting 

state at each of said plurality of decrypting stages; 

a determining section determining whether said 
10 decrypting operation at a next decrypting stage should 

be changed, based on said decrypting stage data at a 

current decrypting stage from said decrypting 

operation section; and 

a control section changing said decrypting 
15 operation at said next decrypting stage when it is 

determined that said decrypting operation at said next 

decrypting stage should be changed. 

9. A decrypting apparatus according to claim 8, 
wherein said determining section determines whether 
said intermediate data at said next decrypting stage 
of said decrypting operation should be changed 

5 depending on at least a random number, based on said 
decrypting stage data at said current decrypting stage 
from said decrypting operation section, 

wherein said stage data includes said 
intermediate data for said next decrypting stage, and 
10 wherein said control section changes said 

intermediate data at said next decrypting stage 
depending on said random number. 

10. A decrypting apparatus according to claim 9, 
wherein said control section changes said intermediate 
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data at said next decrypting stage depending on said 
ciphertext or a data dependent on said ciphertext in 
5 place of said random number. 

11. A decrypting apparatus according to claim 8, 
wherein said determining section determines whether a 
decrypting procedure at said next decrypting stage of 
said decrypting operation should be changed depending 

5 on at least a random number, based on said stage data 
at said current decrypting stage from said decrypting 
operation section, and 

wherein said control section changes said 
decrypting procedure at said next decrypting stage of 
10 said decrypting operation depending on said random 
number . 

12. A decrypting apparatus according to claim 11, 
wherein said control section changes said decrypting 
procedure at said next decrypting stage of said 
decrypting operation depending on said ciphertext or a 

5 data dependent on said ciphertext in place of said 
random number. 

13. A decrypting apparatus according to claim 8, 
wherein said determining section determines whether 
said decrypting operation at said next decrypting 
stage should be changed depending on at least a random 
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5 number, based on said stage data at "said current 
decrypting stage from said decrypting operation 
section, and 

wherein said control section inserts a delay 
time in said decrypting operation at said next 
10 decrypting stage depending on said random number. 

14. A decrypting apparatus according to claim 13, 
wherein said control section inserts said delay time 

O 

in said decrypting operation at said next decrypting 

in 

in stage depending on said ciphertext or a data dependent 

=p 5 on said ciphertext in place of said random number. 

! I 

m 

15. An encrypting and decrypting apparatus 
comprising : 

an encrypting and decrypting operation section 
determining whether an inputted instruction is an 
encrypt instruction or a decrypt instruction, carrying 
out an encrypting operation to an inputted text in 
response to said encrypt instruction using first 
intermediate data at each of a plurality of encrypting 
stages of said encrypting operation to produce a 
ciphertext, and carrying out a decrypting operation to 
said inputted text in response to said decrypt 
instruction using second intermediate data at each of 
a plurality of decrypting stages of said decrypting 
operation to produce a plaintext, wherein said 
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15 encrypting and decrypting operation section outputs 
encrypting stage data indicating an encrypting state 
at each of said plurality of encrypting stages and 
outputs decrypting stage data indicating a decrypting 
state at each of said plurality of decrypting stages; 

20 a determining section determining whether said 

encrypting operation at a next encrypting stage should 
be changed, based on said encrypting stage data at a 
current encrypting stage from said encrypting and 
2 decrypting operation section, and determining whether 

m 

lj% 25 said decrypting operation at a next decrypting stage 

UJ 

^ should be changed, based on said decrypting stage data 

If at a current decrypting stage from said encrypting and 

decrypting operation section; and 

a control section changing said encrypting 
30 operation at said next encrypting stage when it is 

determined that said encrypting operation at said next 
encrypting stage should be changed, and changing said 
decrypting operation at said next decrypting stage 
when it is determined that said decrypting operation 
35 at said next decrypting stage should be changed. 



I f 
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16. An encrypting and decrypting apparatus 

according to claim 15, wherein said determining 
section determines whether said first intermediate 
data at said next encrypting stage of said encrypting 
5 operation should be changed depending on at least a 
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first random number, based on said encrypting stage 
data at said current encrypting stage from said 
encrypting and decrypting operation section, and 
determines whether said second intermediate data at 

10 said next decrypting stage of said decrypting 

operation should be changed depending on at least a 
second random number, based on said decrypting stage 
data at said current decrypting stage from said 
encrypting and decrypting operation section, 

15 wherein said encrypting stage data includes 

said first intermediate data at said next encrypting 
stage and said decrypting stage data includes said 
second intermediate data for said next decrypting 
stage, and 

20 wherein said control section changes said first 

intermediate data at said next encrypting stage 
depending on said first random number and changes said 
second intermediate data at said next decrypting stage 
depending on said second random number. 

17. An encrypting and decrypting apparatus 

according to claim 16, wherein said control section 
changes said first intermediate data at said next 
encrypting stage depending on said inputted text or a 
5 data dependent on said inputted text in place of said 
first random number, and changes said second 
intermediate data at said next decrypting stage 
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depending on said inputted text or said data dependent 
on said inputted text in place of said second random 
number . 

18. An encrypting and decrypting apparatus 
according to claim 15, wherein said determining 
section determines whether an encrypting procedure at 
said next encrypting stage of said encrypting 
operation should be changed depending on at least a 
first random number, based on said encrypting stage 
data at said current encrypting stage from said 
encrypting and decrypting operation section, and 
determines whether a decrypting procedure at said next 
decrypting stage of said decrypting operation should 
be changed depending on at least a second random 
number, based on said decrypting stage data at said 
current decrypting stage from said encrypting and 
decrypting operation section, and 

wherein said control section changes said 
encrypting procedure at said next encrypting stage of 
said encrypting operation depending on said first 
random number and changes said decrypting procedure at 
said next decrypting stage of said decrypting 
operation depending on said second random number. 

19. An encrypting and decrypting apparatus 
according to claim 18, wherein said control section 



- 116 - 



changes said encrypting procedure at said next 
encrypting stage of said encrypting operation 
depending on said inputted text or a data dependent on 
said inputted text in place of said first random 
number, and changes said decrypting procedure at said 
next decrypting stage of said decrypting operation 
depending on said inputted text or said data dependent 
on said inputted text in place of said second random 
number . 

20. An encrypting and decrypting apparatus 

according to claim 15, wherein said determining 
section determines whether said encrypting operation 
at said next encrypting stage should be changed 
depending on at least a first random number, based on 
said encrypting stage data at said current encrypting 
stage from said encrypting and decrypting operation 
section, and determines whether said decrypting 
operation at said next decrypting stage should be 
changed depending on at least a second random number, 
based on said decrypting stage data at said current 
decrypting stage from said encrypting and decrypting 
operation section, and 

wherein said control section inserts a first 
delay time in said encrypting operation at said next 
encrypting stage depending on said first random number 
and inserts a second delay time in said decrypting 
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operation at said next decrypting stage depending on 
said second random number. 

21. An encrypting and decrypting apparatus 
according to claim 20, wherein said control section 
inserts said first delay time in said encrypting 
operation at said next encrypting stage depending on 
said inputted text or a data dependent on said 
inputted text in place of said first random number, 
and inserts said second delay time in said decrypting 
operation at said next decrypting stage depending on 
said inputted text or said data dependent on said 
inputted text in place of said second random number. 

22. An encrypting method comprising: 

(a) determining whether an encrypting operation 
at a current encrypting stage should be changed, based 
on encrypting stage data at a previous encrypting 
stage, said encrypting stage data at said previous 
encrypting stage indicating an encrypting state at 
said previous encrypting stage; 

(b) changing said encrypting operation at said 
current encrypting stage when it is determined that 
said encrypting operation at said current encrypting 
stage should be changed; 

(c) carrying out said encrypting operation at 
said current encrypting stage to a plaintext using 
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intermediate data at said current encrypting stage; 
and 

(d) executing said steps (a) to (c) to each of 
a plurality of said encrypting stages of said 
encrypting operation to produce a ciphertext. 

23. An encrypting method according to claim 22, 
wherein said determining includes: 

determining whether said intermediate data at 
said current encrypting stage of said encrypting 
operation should be changed depending on at least a 
random number, based on said encrypting stage data at 
said previous encrypting stage, 

wherein said encrypting stage data includes 
said intermediate data at said current encrypting 
stage, and 

wherein said changing includes: 

changing said intermediate data at said current 
encrypting stage depending on said random number. 

24. An encrypting method according to claim 23, 
wherein said changing includes : 

changing said intermediate data at said current 
encrypting stage depending on said plaintext or a data 
dependent on said plaintext in place of said random 
number . 




25. An encrypting method according to claim 22, 
wherein said determining includes: 

determining whether an encrypting procedure at 
said current encrypting stage of said encrypting 
5 operation should be changed depending on at least a 
random number, based on said encrypting stage data at 
said previous encrypting stage, and 

wherein said changing includes: 
changing said encrypting procedure at said 
10 current encrypting stage of said encrypting operation 
depending on said random number. 

26. An encrypting method according to claim 25, 
wherein said changing includes : 

changing said encrypting procedure at said next 
encrypting stage of said encrypting operation 
5 depending on said plaintext or a data dependent on 
said plaintext in place of said random number. 

27. An encrypting method according to claim 22, 
wherein said determining includes : 

determining whether said encrypting operation 
at said current encrypting stage should be changed 
5 depending on at least a random number, based on said 
encrypting stage data at said previous encrypting 
stage, and 

wherein said changing includes : 
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inserting a delay time in said encrypting 
operation at said current encrypting stage depending 
on said random number. 

28. An encrypting method according to claim 27, 
wherein said changing includes : 

inserting said delay time in said encrypting 
operation at said current encrypting stage depending 
on said plaintext or a data dependent on said 
plaintext in place of said random number. 

29. A decrypting method comprising: 

(a) determining whether a decrypting operation 
at a current decrypting stage should be changed, based 
on decrypting stage data at a previous decrypting 
stage, said decrypting stage data at said previous 
decrypting stage indicating an decrypting state at 
each of said plurality of processing stages; 

(b) changing said decrypting operation at said 
current decrypting stage when it is determined that 
said decrypting operation at said next decrypting 
stage should be changed; 

(c) carrying out said decrypting operation at 
said current decrypting stage to a ciphertext using 
intermediate data at said current decrypting stage; 
and 

(d) executing said steps (a) to (c) to each of 
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a plurality of decrypting stages to produce a 
plaintext . 

30. A decrypting method according to claim 29, 
wherein said determining includes: 

determining whether said intermediate data at 
said current decrypting stage of said decrypting 
operation should be changed depending on at least a 
random number, based on said decrypting stage data at 
said previous decrypting stage, 

wherein said stage data includes said 
intermediate data at said current decrypting stage, 
and 

wherein said changing includes : 

changing said intermediate data at said current 
decrypting stage depending on said random number. 

31. A decrypting method according to claim 30, 
wherein said changing includes : 

changing said intermediate data at said current 
decrypting stage depending on said ciphertext or a 
data dependent on said ciphertext in place of said 
random number. 

32. A decrypting method according to claim 29, 
wherein said determining includes : 

determining whether a decrypting procedure at 
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said current decrypting stage of said decrypting 
5 operation should be changed depending on at least a 
random number, based on said decrypting stage data at 
said previous decrypting stage, and 

wherein said changing includes : 
changing said decrypting procedure at said 
10 current decrypting stage of said decrypting operation 
depending on said random number. 

r=i 
i— ? 

,f% 33. A decrypting method according to claim 32, 

m 

ij^ wherein said changing includes: 

y 

^ changing said decrypting procedure at said 

yi current decrypting stage of said decrypting operation 

Q 5 depending on said ciphertext or a data dependent on 
nj said ciphertext in place of said random number. 



34. A decrypting method according to claim 29, 

wherein said determining includes: 

determining whether said decrypting operation 

at said current decrypting stage should be changed 
5 depending on at least a random number, based on said 

decrypting stage data at said previous decrypting 

stage, and 

wherein said changing includes : 
inserting a delay time in said decrypting 
10 operation at said current decrypting stage depending 

on said random number. 
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35. A decrypting method according to claim 34, 

wherein said changing includes: 

inserting said delay time in said decrypting 
operation at said current decrypting stage depending 
5 on said ciphertext or a data dependent on said 
ciphertext in place of said random number. 



36. An encrypting and decrypting method comprising: 

(a) determining whether an inputted instruction 

S 

^ is an encrypt instruction or a decrypt instruction; 

m 

in (b) determining whether said encrypting 

y 

^ 5 operation to a text at a current encrypting stage of 

m an encrypting operation should be changed, based on 

P said encrypting stage data at a previous encrypting 

stage, said encrypting stage data at said current 
encrypting stage indicating an encrypting state at 
10 said current encrypting stage; 

(c) changing said encrypting operation to said 
text at said current encrypting stage when it is 
determined that said encrypting operation to said text 
at said current encrypting stage should be changed; 
15 (d) carrying out said encrypting operation to 

said text using first intermediate data at current 
encrypting stage of said encrypting operation; 

(e) executing said steps (b) to (d) for each of 
a plurality of encrypting stages of said encrypting 
20 operation to said text in response to said encrypt 
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instruction to produce a ciphertext ; 

(f ) determining whether said decrypting 
operation to said text at a current decrypting stage 
should be changed, based on said decrypting stage data 

25 at a previous decrypting stage, said decrypting stage 
data at said current decrypting stage indicating an 
decrypting state at said current decrypting stage; 

(g) changing said decrypting operation to said 
text at said current decrypting stage when it is 

30 determined that said decrypting operation to said text 



at said current decrypting stage should be changed; 



(h) carrying out said decrypting operation to 
said text using second intermediate data at said 



Q current decrypting stage; and 

?y 35 (i) executing said steps (f) to (h) for each of 

□ a plurality of decrypting stages of said encrypting 

□ 

operation to said text in response to said decrypt 
instruction to produce a plaintext. 



37. An encrypting and decrypting method according 

to claim 36, wherein said (b) determining includes: 

determining whether said first intermediate 
data at said current encrypting stage of said 
5 encrypting operation should be changed depending on at 
least a first random number, based on said encrypting 
stage data at said previous encrypting stage, 
wherein said (f) determining includes: 
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determining whether said second intermediate 
data at said current decrypting stage of said 
decrypting operation should be changed depending on at 
least a second random number, based on said decrypting 
stage data at said previous decrypting stage, 

wherein said encrypting stage data includes 
said first intermediate data at said current 
encrypting stage and said decrypting stage data 
includes said second intermediate data for said 
current decrypting stage, 

wherein said (c) changing includes: 
changing said first intermediate data at said 
current encrypting stage depending on said first 
random number, and 

wherein said (g) changing includes: 
hanging said second intermediate data at said 
current decrypting stage depending on said second 
random number. 

38. An encrypting and decrypting method according 

to claim 37, wherein said (c) changing includes: 

changing said first intermediate data at said 
current encrypting stage depending on said text or a 
5 data dependent on said text in place of said first 
random number, and 

wherein said (g) changing includes: 

changing said second intermediate data at said 
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current decrypting stage depending on said text or 
10 said data dependent on said text in place of said 
second random number. 

39. An encrypting and decrypting method according 

to claim 36, wherein said (b) determining includes: 

determining whether an encrypting procedure at 
said current encrypting stage of said encrypting 
5 operation should be changed depending on at least a 
first random number, based on said encrypting stage 

m 

in data at said previous encrypting stage, 

ly 

^ wherein said (f) determining includes: 

yi determining whether a decrypting procedure at 

= 

O 10 said current decrypting stage of said decrypting 

=F 

ry operation should be changed depending on at least a 

O 

second random number, based on said decrypting stage 



a 



data at said previous decrypting stage, 

wherein said (c) changing includes: 
15 changing said encrypting procedure at said 

current encrypting stage of said encrypting operation 
depending on said first random number, and 
wherein said (g) changing includes: 
changing said decrypting procedure at said 
20 current decrypting stage of said decrypting operation 
depending on said second random number. 

40. An encrypting and decrypting method according 



m • 
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to claim 39, wherein said (c) changing includes: 

changing said encrypting procedure at said 
current encrypting stage of said encrypting operation 
depending on said text or a data dependent on said 
text in place of said first random number, and 
wherein said (g) changing includes: 
changing said decrypting procedure at said 
current decrypting stage of said decrypting operation 
depending on said text or said data dependent on said 
text in place of said second random number. 

41. An encrypting and decrypting method according 

to claim 36, wherein said (b) determining includes: 

determining whether said encrypting operation 
at said current encrypting stage should be changed 
depending on at least a first random number, based on 
said encrypting stage data at said previous encrypting 
stage , 

wherein said (f ) determining includes: 
determining whether said decrypting operation 
at said current decrypting stage should be changed 
depending on at least a second random number, based on 
said decrypting stage data at said previous decrypting 
stage , 

wherein said (c) changing includes: 
inserting a first delay time in said encrypting 
operation at said current encrypting stage depending 
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on said first random number, and 

wherein said (g) changing includes: 
inserting a second delay time in said 
20 decrypting operation at said current decrypting stage 
depending on said second random number. 

42. An encrypting and decrypting method according 
to claim 41, wherein said (c) changing includes: 

inserting said first delay time in said 
encrypting operation at said current encrypting stage 
depending on said text or a data dependent on said 
text in place of said first random number, 
wherein said (f) changing includes: 
inserting said second delay time in said 
decrypting operation at said current decrypting stage 
depending on said text or said data dependent on said 
text in place of said second random number. 

43. A recording medium which stores a problem for 
an encrypting method, wherein said encrypting method 
comprises : 

(a) determining whether an encrypting operation 
5 at a current encrypting stage should be changed, based 
on encrypting stage data at a previous encrypting 
stage, said encrypting stage data at said previous 
encrypting stage indicating an encrypting state at 
said previous encrypting stage; 
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(b) changing said encrypting operation at said 
current encrypting stage when it is determined that 
said encrypting operation at said current encrypting 
stage should be changed; 

(c) carrying out said encrypting operation at 
said current encrypting stage to a plaintext using 
intermediate data at said current encrypting stage; 
and 

(d) executing said steps (a) to (c) to each of 
a plurality of said encrypting stages of said 
encrypting operation to produce a ciphertext. 

44. A recording medium according to claim 43, 
wherein said determining includes: 

determining whether said intermediate data at 
said current encrypting stage of said encrypting 
operation should be changed depending on at least a 
random number, based on said encrypting stage data at 
said previous encrypting stage, 

wherein said encrypting stage data includes 
said intermediate data at said current encrypting 
stage, and 

wherein said changing includes: 

changing said intermediate data at said current 
encrypting stage depending on said random number. 

45. A recording medium according to claim 44, 
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wherein said changing includes: 

changing said intermediate data at said current 
encrypting stage depending on said plaintext or a data 
5 dependent on said plaintext in place of said random 
number . 

46. A recording medium according to claim 43, 
wherein said determining includes : 

determining whether an encrypting procedure at 
said current encrypting stage of said encrypting 
5 operation should be changed depending on at least a 
random number, based on said encrypting stage data at 
said previous encrypting stage, and 

wherein said changing includes : 
changing said encrypting procedure at said 
10 current encrypting stage of said encrypting operation 
depending on said random number. 

47. A recording medium according to claim 46, 
wherein said changing includes : 

changes said encrypting procedure at said next 
encrypting stage of said encrypting operation 
5 depending on said plaintext or a data dependent on 
said plaintext in place of said random number. 

48. A recording medium according to claim 43, 
wherein said determining includes : 




determining whether said encrypting operation 
at said current encrypting stage should be changed 
depending on at least a random number, based on said 
encrypting stage data at said previous encrypting 
stage, and 

wherein said changing includes : 
inserting a delay time in said encrypting 
operation at said current encrypting stage depending 
on said random number. 

49. A recording medium according to claim 48, 
wherein said changing includes : 

inserting said delay time in said encrypting 
operation at said current encrypting stage depending 
on said plaintext or a data dependent on said 
plaintext in place of said random number. 

50. A recording medium which stores a program for a 
decrypting method, wherein said decrypting method 
comprises : 

(a) determining whether a decrypting operation 
at a current decrypting stage should be changed, based 
on decrypting stage data at a previous decrypting 
stage, said decrypting stage data at said previous 
decrypting stage indicating an decrypting state at 
each of said plurality of processing stages; 

(b) changing said decrypting operation at said 
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current decrypting stage when it is determined that 
said decrypting operation at said next decrypting 
stage should be changed; 

(c) carrying out said decrypting operation at 
15 said current decrypting stage to a ciphertext using 

intermediate data at said current decrypting stage; 
and 

(d) executing said steps (a) to (c) to each of 
a plurality of decrypting stages to produce a 

20 plaintext . 

51. A recording medium according to claim 50, 
wherein said determining includes : 

determining whether said intermediate data at 
said current decrypting stage of said decrypting 
5 operation should be changed depending on at least a 
random number, based on said decrypting stage data at 
said previous decrypting stage, 

wherein said stage data includes said 
intermediate data at said current decrypting stage, 
10 and 

wherein said changing includes : 

changing said intermediate data at said current 
decrypting stage depending on said random number. 

52. A recording medium according to claim 51, 
wherein said changing includes : 
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changing said intermediate data at said current 
decrypting stage depending on said ciphertext or a 
data dependent on said ciphertext in place of said 
random number. 

53. A recording medium according to claim 50, 
wherein said determining includes: 

determining whether a decrypting procedure at 
said current decrypting stage of said decrypting 
operation should be changed depending on at least a 
random number, based on said decrypting stage data at 
said previous decrypting stage, and 

wherein said changing includes : 
changing said decrypting procedure at said 
current decrypting stage of said decrypting operation 
depending on said random number. 

54. A recording medium according to claim 53, 
wherein said changing includes : 

changing said decrypting procedure at said 
current decrypting stage of said decrypting operation 
depending on said ciphertext or a data dependent on 
said ciphertext in place of said random number. 

55. A recording medium according to claim 50, 
wherein said determining includes: 

determining whether said decrypting operation 
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at said current decrypting stage should be changed 
5 depending on at least a random number, based on said 
decrypting stage data at said previous decrypting 
stage, and 

wherein said changing includes; 
inserting a delay time in said decrypting 
10 operation at said current decrypting stage depending 
on said random number. 



2 56. A recording medium according to claim 55, 

Ln 

fq wherein said changing includes : 

ill 

^ inserting said delay time in said decrypting 

operation at said current decrypting stage depending 

Q 5 on said ciphertext or a data dependent on said 

pj ciphertext in place of said random number. 



57. A recording medium which stores a problem for 

an encrypting and decrypting method, wherein said 
encrypting and decrypting method comprises: 

(a) determining whether an inputted instruction 
5 is an encrypt instruction or a decrypt instruction; 

(b) determining whether said encrypting 
operation to a text at a current encrypting stage of 
an encrypting operation should be changed, based on 
said encrypting stage data at a previous encrypting 

10 stage, said encrypting stage data at said current 
encrypting stage indicating an encrypting state at 




m 
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said current encrypting stage; 

(c) changing said encrypting operation to said 
text at said current encrypting stage when it is 

15 determined that said encrypting operation to said text 
at said current encrypting stage should be changed; 

(d) carrying out said encrypting operation to 
said text using first intermediate data at current 
encrypting stage of said encrypting operation; 

20 (e) executing said steps (b) to (d) for each of 

a plurality of encrypting stages of said encrypting 
operation to said text in response to said encrypt 
instruction to produce a ciphertext; 

(f ) determining whether said decrypting 

25 operation to said text at a current decrypting stage 

should be changed, based on said decrypting stage data 
at a previous decrypting stage, said decrypting stage 
data at said current decrypting stage indicating an 
decrypting state at said current decrypting stage; 

30 (g) changing said decrypting operation to said 

text at said current decrypting stage when it is 
determined that said decrypting operation to said text 
at said current decrypting stage should be changed; 

(h) carrying out said decrypting operation to 

35 said text using second intermediate data at said 
current decrypting stage; and 

(1) executing said steps (f) to (h) for each of 
a plurality of decrypting stages of said encrypting 
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operation to said text in response to said decrypt 
instruction to produce a plaintext. 



58. A recording medium according to claim 57, 

wherein said (b) determining includes: 

determining whether said first intermediate 
data at said current encrypting stage of said 
encrypting operation should be changed depending on at 
least a first random number, based on said encrypting 
stage data at said previous encrypting stage, 
wherein said (f) determining includes: 
determining whether said second intermediate 
data at said current decrypting stage of said 
decrypting operation should be changed depending on at 
least a second random number, based on said decrypting 
stage data at said previous decrypting stage, 

wherein said encrypting stage data includes 
said first intermediate data at said current 
encrypting stage and said decrypting stage data 
includes said second intermediate data for said 
current decrypting stage, 

wherein said (c) changing includes: 
changing said first intermediate data at said 
current encrypting stage depending on said first 
random number, and 

wherein said (g) changing includes: 

hanging said second intermediate data at said 
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current decrypting stage depending on said second 
random number. 

59. A recording medium according to claim 58, 
wherein said (c) changing includes: 

changing said first intermediate data at said 
current encrypting stage depending on said text or a 
data dependent on said text in place of said first 
random number, and 

wherein said (g) changing includes: 
changing said second intermediate data at said 
current decrypting stage depending on said text or 
said data dependent on said text in place of said 
second random number. 

60. A recording medium according to claim 57, 
wherein said (b) determining includes: 

determining whether an encrypting procedure at 
said current encrypting stage of said encrypting 
operation should be changed depending on at least a 
first random number, based on said encrypting stage 
data at said previous encrypting stage, 

wherein said (f) determining includes: 
determining whether a decrypting procedure at 
said current decrypting stage of said decrypting 
operation should be changed depending on at least a 
second random number, based on said decrypting stage 
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data at said previous decrypting stage, 

wherein said (c) changing Includes: 
15 changing said encrypting procedure at said 

current encrypting stage of said encrypting operation 
depending on said first random number, and 
wherein said (g) changing includes: 
changing said decrypting procedure at said 
20 current decrypting stage of said decrypting operation 
depending on said second random number. 

□ 

61. A recording medium according to claim 60, 

wherein said (c) changing includes: 

changing said encrypting procedure at said 
current encrypting stage of said encrypting operation 
depending on said text or a data dependent on said 
text in place of said first random number, and 
wherein said (g) changing includes: 
changing said decrypting procedure at said 
current decrypting stage of said decrypting operation 
depending on said text or said data dependent on said 
text in place of said second random number. 



in 



O 



10 



62. A recording medium according to claim 57, 

wherein said (b) determining Includes: 

determining whether said encrypting operation 
at said current encrypting stage should be changed 
5 depending on at least a first random number, based on 
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said encrypting stage data at said previous encrypting 
stage , 

wherein said (f) determining includes: 
determining whether said decrypting operation 
at said current decrypting stage should be changed 
depending on at least a second random number, based on 
said decrypting stage data at said previous decrypting 
stage , 

wherein said (c) changing includes: 
inserting a first delay time in said encrypting 
operation at said current encrypting stage depending 
on said first random number, and 

wherein said (g) changing includes: 
inserting a second delay time in said 
decrypting operation at said current decrypting stage 
depending on said second random number. 

63. A recording medium according to claim 62, 

wherein said (c) changing includes: 

inserting said first delay time in said 
encrypting operation at said current encrypting stage 
5 depending on said text or a data dependent on said 
text in place of said first random number, 
wherein said (f) changing includes: 
inserting said second delay time in said 
decrypting operation at said current decrypting stage 
10 depending on said text or said data dependent on said 
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text In place of said second random number. 
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